Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-35980
Summary
A buffer overflow vulnerability exists in multiple services associated with Aruba's Access Point Management Protocol (PAPI), specifically over UDP port 8211. By sending specially crafted packets, an attacker can potentially execute arbitrary code on the affected system, exploiting the privilege level of the operating system. This vulnerability poses significant risks as it allows unauthorized users to gain privileged access, which can lead to further exploitation and data compromise.
Affected Version(s)
Aruba Access Points running InstantOS and ArubaOS 10 ArubaOS 10.4.x.x: 10.4.0.1 and below
Aruba Access Points running InstantOS and ArubaOS 10 ArubaOS 10.4.x.x: 10.4.0.1 and below
Aruba Access Points running InstantOS and ArubaOS 10 InstantOS 8.11.x.x: 8.11.1.0 and below
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved